This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60CCE12EFB811F0B685279EDAE4EC9C.roa
File: E60CCE12EFB811F0B685279EDAE4EC9C.roa (raw, json)
Hash identifier: s6NP9zvn9Fs2pu1+zYNQwv8E2HHL6xgsV3eqDZ/Sn9A=
Subject key identifier: D4:DC:EE:5A:40:DB:EC:9C:CB:48:BF:D3:D4:CD:F2:EE:87:ED:FA:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B456
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60CCE12EFB811F0B685279EDAE4EC9C.roa
Signing time: Mon 12 Jan 2026 13:16:26 +0000
ROA not before: Mon 12 Jan 2026 13:16:21 +0000
ROA not after: Mon 09 Feb 2026 13:16:21 +0000
asID: 201670
IP address blocks: 154.213.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 23 Jan 2026 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111702 (0x1b456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 13:16:21 2026 GMT
Not After : Feb 9 13:16:21 2026 GMT
Subject: CN=6964f42a-f273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:b0:57:70:55:a8:79:1f:f3:f1:57:07:ad:
40:84:14:f5:21:04:87:1d:c4:1b:80:f9:19:83:5c:
ee:77:6f:12:75:82:2e:df:dd:8e:59:cd:b7:92:5e:
a9:a9:a2:41:65:9e:79:0c:62:3a:a0:e5:1d:f2:05:
90:b6:25:ce:a3:a6:3c:5c:aa:42:34:d9:41:d6:1c:
71:e4:61:6b:9f:03:00:c2:86:2a:7c:a0:08:a5:4e:
23:28:f1:84:20:c5:76:24:64:9f:06:f1:e5:ff:13:
ed:cf:7f:e1:15:fb:2e:80:12:fe:75:85:d2:e4:c7:
41:4f:0b:79:8b:be:59:9c:18:02:2d:42:62:1a:fd:
93:2f:2f:b7:cc:ed:f5:fe:ba:1b:4a:a3:56:74:bf:
58:51:bc:11:5f:a0:2f:81:a0:d8:35:af:21:40:22:
84:66:c1:8f:d6:5c:ff:54:a1:6e:98:22:41:8e:31:
4b:76:48:14:86:0c:77:f9:04:fb:f2:7c:e3:a5:24:
61:ae:dc:4d:40:84:65:c3:3c:be:f4:ee:43:dd:82:
02:5e:2c:80:86:47:f3:d3:b6:04:c4:77:38:40:9c:
7a:c8:ef:f0:37:ef:fd:10:37:8f:fd:b3:6d:26:9f:
27:bf:12:b5:51:de:3d:f1:21:09:d3:41:f1:bf:e4:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DC:EE:5A:40:DB:EC:9C:CB:48:BF:D3:D4:CD:F2:EE:87:ED:FA:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60CCE12EFB811F0B685279EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.167.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:aa:80:ed:7f:2a:90:57:34:cb:e1:1e:e7:e0:0c:75:01:96:
1f:3f:2b:aa:bf:43:77:fb:7b:87:d5:99:6b:a9:20:3f:ff:6d:
b3:94:b9:9e:a4:84:64:40:9a:90:54:df:24:48:ca:89:8d:3d:
9e:40:a0:d9:71:e2:c3:0e:08:b8:37:e6:a5:8f:3b:a0:16:8f:
30:cd:3e:44:8c:5d:7c:65:fa:5d:35:7f:4a:33:2a:77:46:b2:
0b:c5:f3:f9:89:eb:2f:c4:80:24:09:60:18:af:e3:b7:dc:69:
8f:54:c7:96:00:dc:3c:d7:1f:08:f0:8e:91:fb:b0:62:00:4f:
5f:44:b2:36:0a:bd:68:a7:a3:c6:bb:7e:1a:4c:80:58:5d:28:
85:2c:be:d4:f6:78:40:81:71:2d:f7:d9:00:09:26:4b:ed:8e:
fa:a0:97:f7:1e:1d:64:f1:7a:d5:9f:e1:d6:1d:d1:41:c1:b3:
95:da:4d:1a:59:3c:f5:04:12:f3:d1:e6:ee:e9:75:da:ba:e0:
ad:c1:ef:1f:b2:01:28:5d:fa:64:70:82:f1:f0:e0:af:7a:92:
4f:30:1d:f0:c2:f3:13:ba:b1:8f:d7:20:7f:5d:6e:5b:06:2c:
d9:4c:27:50:e2:77:ea:81:59:5d:0e:03:12:b9:c1:85:22:a3:
81:4e:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:38:25 2026 by rpki-client